Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/fD4OezRM4UrasrKKJ10uGn5_Qug.roa
File: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (raw, json)
Hash identifier: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=
Subject key identifier: 7C:3E:0E:7B:34:4C:E1:4A:DA:B2:B2:8A:27:5D:2E:1A:7E:7F:42:E8
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01942444A404C58A844D7D22EB5AB3840D34
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/fD4OezRM4UrasrKKJ10uGn5_Qug.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35393
IP address blocks: 46.255.160.0/21 maxlen: 24
91.207.254.0/23 maxlen: 24
185.100.4.0/22 maxlen: 24
194.110.192.0/24 maxlen: 24
195.144.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a4:04:c5:8a:84:4d:7d:22:eb:5a:b3:84:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c3e0e7b344ce14adab2b28a275d2e1a7e7f42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:bc:ae:8b:c5:7f:cf:66:79:f0:f7:5d:0a:
cc:18:a3:26:6a:9e:ab:3b:2d:e7:ac:38:6f:8e:e5:
55:8c:26:05:4d:9a:8b:93:44:a9:29:3c:4d:4a:d0:
86:e4:1f:b6:4c:c4:d6:2a:89:d4:13:94:14:71:9a:
38:f6:c2:67:46:7f:a0:59:61:12:55:e0:73:47:1b:
d5:e4:52:a9:10:8a:0f:41:7b:f4:a6:60:4c:42:d2:
e2:69:a7:56:94:63:d5:47:8a:3d:10:88:49:d9:e4:
92:be:b2:43:91:8c:61:43:9d:ef:c8:b4:14:fb:5d:
70:e3:20:d9:07:f5:f2:19:58:c1:bb:52:6e:7d:74:
79:a2:08:e5:04:2a:4f:f7:14:bb:5f:0c:0c:dd:7a:
7b:1e:ca:80:21:c9:86:76:03:4f:e2:82:e3:d0:1f:
08:1c:72:a4:b6:76:8e:e1:2c:cd:45:89:3f:07:93:
91:db:ba:aa:ce:85:58:91:5e:0c:74:07:21:0a:47:
b7:e2:6f:ea:31:60:1d:51:47:80:48:91:16:67:3c:
37:48:62:bc:30:8c:bb:e1:fa:88:29:e2:fe:b7:d3:
a5:45:be:81:c4:39:f0:26:c9:3b:4e:b5:b6:7e:15:
af:65:a7:25:6f:8c:07:5b:47:41:5c:8d:f0:c1:f1:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3E:0E:7B:34:4C:E1:4A:DA:B2:B2:8A:27:5D:2E:1A:7E:7F:42:E8
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/fD4OezRM4UrasrKKJ10uGn5_Qug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.160.0/21
91.207.254.0/23
185.100.4.0/22
194.110.192.0/24
195.144.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4a:be:9f:21:96:03:2f:da:91:0c:03:ce:2d:0a:17:e1:5a:
94:97:e9:9d:1b:4d:56:0b:6e:9d:65:16:86:5d:56:08:7b:6a:
70:d1:76:d3:cb:b5:f0:ba:42:a7:e0:b8:f6:51:1e:12:ba:22:
6b:16:56:49:41:9d:43:89:03:5a:2c:0d:fc:85:e4:dc:55:4c:
bf:00:ed:57:e5:d5:7e:62:21:19:b9:90:16:b0:bf:7b:77:de:
58:2f:65:5a:d5:c6:f7:d2:1e:8f:8d:26:16:06:b3:da:8e:8d:
3a:1c:09:1a:51:a2:0b:c3:bf:ab:cd:b6:82:85:32:50:0e:d6:
81:4b:ef:c5:98:63:3f:17:fb:88:53:17:c7:99:4e:d3:d3:54:
bd:5e:30:0e:33:16:1b:5a:f2:15:6f:73:82:58:53:47:f1:30:
c3:a0:1a:6d:97:d3:79:2b:29:5d:66:c7:61:11:7e:e5:f1:2c:
7c:7b:02:9e:a1:48:01:75:84:f3:d1:3b:bb:40:c7:17:40:6c:
da:dd:30:43:1d:77:d0:87:f2:74:c8:c4:bc:04:dc:a4:ab:94:
2c:14:ee:88:cc:5e:f1:5b:6c:21:99:8c:f3:5d:25:a9:e6:bb:
bc:9d:e4:03:a1:a9:3c:b8:eb:cd:5c:49:41:9b:b3:4a:ea:fe:
77:90:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:52 2025 by rpki-client